What’s Vulnerable › Vulnerabilities
CVE-2022-31698
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 47.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-12-13 · updated 2026-06-17
- Weakness: CWE-400
Description
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Affected products
- VMware Cloud Foundation: 3.0, 3.0.1, 3.0.1.1, 3.5, 3.5.1, 3.7 (+25)
- VMware vCenter Server: 6.5, 6.5-a, 6.5-b, 6.5-c, 6.5-d, 6.5-e (+67)
- VMware vCenter Server, VMware Cloud Foundation: from VMware (7.0 prior through 7.0 U3i, 6.7 prior to 6.7.0 U3s, 6.5 prior to 6.5 U3u), VMware Cloud Foundation (4.x, 3.x)
References
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588
- https://www.vmware.com/security/advisories/VMSA-2022-0030.html
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588
- https://www.vmware.com/security/advisories/VMSA-2022-0030.html
Get alerted when CVE-2022-31698 or the next vulnerability affects your stack